High severity7.1NVD Advisory· Published Sep 1, 2026· Updated Sep 8, 2026

CVE-2026-84192

Description

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog program fields that executes when authenticated users view affected pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Librenms/Librenmsllm-fuzzy
Range: <26.3.1

Patches

Vulnerability mechanics

References

github.com/librenms/librenms/security/advisories/GHSA-7w8c-qgxg-m7jxnvd
www.vulncheck.com/advisories/librenms-before-26.3.1-stored-xss-via-snmp-syslog-datanvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000